Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
File: rS2L1OZ06M7VoJfUPepxhETnivU.mft (raw, json)
Hash identifier: 2hqFmLc8ejksZM5ghhk/b4pbHgPNlfbTc6Nxt41Fdp4=
Subject key identifier: BC:84:BC:A6:C0:80:60:2C:7C:20:76:98:2A:18:BB:41:DD:E4:E6:B9
Authority key identifier: AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5
Certificate issuer: /CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
Certificate serial: 0197C19250ADD57AD4A67A1CECC4152B08C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
Manifest number: 128B
Signing time: Mon 30 Jun 2025 16:01:20 +0000
Manifest this update: Mon 30 Jun 2025 16:01:20 +0000
Manifest next update: Tue 01 Jul 2025 16:01:20 +0000
Files and hashes: 1: rS2L1OZ06M7VoJfUPepxhETnivU.crl (hash: l8CRfajYNG55WCXfVUqBU4L1UIk+NXrJQDqJxVhqqvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:50:ad:d5:7a:d4:a6:7a:1c:ec:c4:15:2b:08:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
Validity
Not Before: Jun 30 16:01:20 2025 GMT
Not After : Jul 1 16:01:20 2025 GMT
Subject: CN=bc84bca6c080602c7c2076982a18bb41dde4e6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:db:c7:a8:09:b4:6f:3a:97:e1:13:9f:a1:
f9:e8:76:08:cb:5b:3c:e4:ba:b4:98:e5:88:5f:f8:
90:24:a5:af:29:d2:48:d1:a7:0f:70:e7:af:be:91:
0c:18:22:6e:6c:d9:0e:80:70:35:c0:9a:de:e5:e8:
7f:da:cf:ce:ed:22:3a:b2:3f:9b:fc:8a:1f:cf:53:
3d:c2:c3:6f:a3:dd:95:7e:11:66:b3:29:be:2e:c3:
93:e9:ac:b5:20:3e:97:2f:bd:97:f4:2d:9f:30:6b:
5f:2c:14:75:ce:be:cd:3b:a1:20:91:d9:d6:7e:11:
3d:a9:52:aa:74:70:b7:17:a6:91:f0:c5:e8:12:1a:
8b:44:fb:71:b0:a7:e1:37:e2:a5:05:33:57:f6:1c:
a6:90:44:59:b5:bb:8d:18:09:86:ad:eb:b4:f8:26:
18:fa:91:0a:7e:8f:a8:51:40:50:50:7c:09:8b:4d:
d0:e1:d5:6f:b2:61:7f:88:84:41:75:44:4c:54:f7:
23:34:da:55:ed:1a:ad:dd:19:e0:1c:ce:ab:7a:c9:
8d:83:44:52:5d:62:7f:c4:17:29:52:a3:1c:4d:99:
84:78:24:84:22:b0:bd:c8:bc:8e:20:0f:90:a2:51:
55:fd:0b:5b:0e:24:87:f0:00:a0:69:b7:01:df:90:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:84:BC:A6:C0:80:60:2C:7C:20:76:98:2A:18:BB:41:DD:E4:E6:B9
X509v3 Authority Key Identifier:
keyid:AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:11:04:4e:63:e9:9e:bf:66:d5:4f:32:73:ee:c5:ad:6a:70:
00:82:6f:9c:31:00:37:67:09:4d:76:60:66:17:7d:66:2c:c3:
83:11:3f:b8:61:ee:e8:26:f3:ee:c0:a3:0e:ef:4a:8b:23:be:
62:c6:04:f2:4a:6d:60:46:a9:8f:aa:de:a2:df:7e:f2:aa:af:
32:40:dd:58:64:e6:7f:a1:42:27:84:22:6f:a9:bb:1c:34:97:
b0:42:c6:c6:e1:62:2b:30:35:9a:58:25:05:cb:b9:2b:d5:70:
86:63:eb:96:3f:26:45:27:cc:98:e3:2c:0e:9b:4b:a8:db:bc:
c9:f9:57:b5:50:bf:a6:6f:1c:0c:8b:b2:2f:f4:76:69:87:a9:
90:ca:76:0f:99:3d:b1:e8:20:06:28:1f:3c:d6:6c:97:4a:36:
8f:8d:68:ce:a0:3b:d9:25:c2:33:d2:b0:83:3f:5b:bb:10:89:
7f:eb:04:1d:34:46:9e:35:d5:34:2b:7a:21:68:1e:7c:1f:e5:
ca:e4:34:fb:00:b4:21:e2:d9:69:52:c8:36:d5:91:c3:a2:15:
b2:49:02:43:43:83:78:f4:43:e7:7f:7e:7b:1b:8f:8c:6d:be:
56:23:10:f8:e2:71:97:c9:b5:63:0f:69:e9:1a:d8:48:b9:04:
e2:cb:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:55:17 2025 by rpki-client